VULNERABILITY INTELLIGENCE

CVE-2024-56731

CVSS score10 CRITICAL

EPSS probability52.66%

CISA KEVNot currently listed

Published2025-06-24

Last modified2026-06-17

Description

Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instance w…